Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Zope Management Interface 4.3.7 and earlier, and Plone before 5.x.

Remediation

References

CVE-2015-7293

Related Vulnerabilities

WordPress 2.2.1 Multiple Vulnerabilities (2.2.1)

WordPress Plugin Attachment Manager Arbitrary File Upload (2.1.1)

WordPress Plugin FooBox Image Lightbox Security Bypass (2.6.3)

TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-5644)

WordPress Plugin Link Library Cross-Site Scripting (5.8.10.6)

Severity

High

Classification

CVE-2015-7293 CWE-352 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities